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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i koth rough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND and CANCEL the claims as follows: 

1 . (Currently Amended) A security system comprising an information management 
system that manages information and an encryption support system that supports encryption of 
the information and in network communication with the information management system, 
the encryption support system including 

an encryption rule storing portion that stores rule information that indicates an 
encryption rule for each secret level, 

an encryption data transmitting portion that transmits encryption data that is 
necessary for encrypting the information in accordance with the encryption rule over the network 
to the information management system, 

a process information receiving portion that receives process information, which 
indicates an encryption process performed by the information management system, over the 
network from the information management system, 

a monitoring portion that monitors by confirming whether e^H : ^et- the information 
management system encrypted the information i s oncryptod in accordance with the encryption 
rule by tho i nformat i on managomont system based upon the process information received over 
the network from the information management system, and 

a warning portion that warns the information management system over the 
network, if the monitoring portion has determined that the information is not encrypted in 
accordance with the encryption rule, and 

the information management system including 

an encryption data receiving portion that receives the encryption data over the 
network from the encryption support system, 

a classification secret level storing portion that stores classification of the 
information in connection with a secret level for each classification, 
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an encrypting portion that specifies the classification of the information and 
encrypts the information by using the received encryption data of the secret level for the 
specified classification, 

an information storing portion that stores the encrypted information, and 
a process information transmitting portion that transmits the process information 
over the network to the encryption support system. 

2. (previously presented) The security system according to claim 1 , wherein the rule 
information indicates, as the encryption rule, a rule about cryptography and a valid term of an 
encryption key for encrypting the information, 

if a period from the encryption process of the information to the present time exceeds 
the valid term for the encryption rule of the secret level for the classification of the information, 
the warning portion warns the information management system, 

if the cryptography of the encryption rule is changed, the encryption data transmitting 
portion transmits the encryption data for performing encryption in accordance with the changed 
cryptography to the information management system, and 

the warning portion warns the information management system to encrypt the information 
in accordance with the changed cryptography. 

3. (previously presented) The security system according to claim 1 , wherein the 
information management system includes 

a classification secret level transmitting portion that transmits classification secret level 
information, which indicates the classification and the secret level for the classification, over the 
network to the encryption support system, and 

the monitoring portion of the encryption support system monitors whether the information 
is encrypted in accordance with the encryption rule by the information management system 
based upon the process information received over the network from the information 
management system by comparing the received process information with the received 
classification secret level information. 

4. (previously presented) The security system according to claim 1 , further 
comprising a valid term managing portion that manages a valid term of a certification for affixing 
an electronic signature to the information, wherein 
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the monitoring portion monitors whether or not it is necessary to affix a different 
electronic signature to the information in accordance with the valid term of the certification, and 

the warning portion warns the information management system to affix the different 
electronic signature to the information if it is decided that it is necessary to affix the different 
electronic signature. 

5. (currently amended) An information management system that manages 
information and receives support for encrypting information from an encryption support system in 
a network communication with the information management system, comprising: 

a receiving portion that receives rule information, which indicates an encryption rule for 
each secret level and encryption data necessary for encrypting the information in accordance 
with the encryption rule, over the network from the encryption support system; 

a classification secret level storing portion that stores classification of the information in 
connection with a secret level; 

an encrypting portion that specifies the classification of the information and encrypts the 
information by using the received encryption data of the secret level for the specified 
classification; 

an information storing portion that stores the encrypted information; and 
[fall an encryption process i nformat i on confirmation portion conf i rm i ng that confirms 
whether the encryption of the information was performed in accordance with the encryption rule 
by transmitting , over the network to the encryption support system, port i on that transm i ts process 
information , wh i ch i nd i cat e s indicating the encryption process performed by the encrypting 
portion and r e c ei v i ng receives a confirmation result from the encryption support system , ov e r th e 
n e twork to th e e ncrypt i on support syst e m so as to rec ei v e a ch e ck of wh e th e r th e e ncrypt i on of 
th e i nformat i on was p e rform e d i n accordance with th e e ncrypt i on ru le. 

6. (currently amended) An encryption support system that encrypts information and 
supports an information management system that manages information and is in communication 
over a network with the encryption support system, the encryption support system comprising: 

an encryption rule storing portion that stores rule information that indicates an encryption 
rule for each secret level; 

a transmitting portion that transmits encryption data that is necessary for encrypting the 
information in accordance with the encryption rule over the network to the information 
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management system; 

a receiving portion that receives process information, which indicates the encryption 
process performed by the information management system, over the network from the 
information management system; 

a monitoring portion that monitors by confirming whether the information management 
system encrypted the information i s e ncrypt e d in accordance with the encryption rule by th e 
i nformat i on manag e m e nt syst e m based upon the process information received over the network 
from the information management system; and 

a warning portion that warns the information management system over the network, if the 
monitoring portion has determined that the information is not encrypted according to the 
encryption rule. 

7. (previously presented) The encryption support system according to claim 6, 
further comprising a validity monitoring portion that monitors validity of an encryption rule that is 
used currently in accordance with vulnerability information about vulnerability of security received 
from a security information providing portion, wherein 

the transmitting portion transmits the encryption data for changing the encryption rule 
appropriately, to the information management system over the network, if decided that the 
encryption rule used currently has low validity. 

8. (currently amended) A computer-readable storage storing a program supporting 
encryption of information for an information management system that manages information, the 
program causing a computer, which is in a network communication with the information 
management system, to execute a process comprising: 

transmitting an encryption rule for each secret level and encryption data that is necessary 
for encrypting the information in accordance with the encryption rule over the network to the 
information management system; 

receiving process information, which indicates an encryption process performed by the 
information management system, over the network from the information management system; 

monitoring by confirming whether the information management system encrypted the 
information i s e ncrypt e d in accordance with the encryption rule by th e i nformat i on manag e m e nt 
syst e m based upon the process information received over the network from the information 
management system; and 
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warning the information management system over the network, if the monitoring 
determines the information is not encrypted in accordance with the encryption rule. 

9. (currently amended) A method, comprising: 

transmitting, over a computer network, an encryption rule for a security level to an 
information management computer; 

monitoring by confirming whether the information management system data-is-encrypted 
by th e i nformat i on manag e m e nt comput e r the data in accordance with the encryption rule for the 
security level; and 

warning the information management system over the network, if the data is not 
encrypted in accordance with the encryption rule. 

10. (cancelled) 

1 1 . (currently amended) A security system comprising an information management 
system that manages and encrypts information and an encryption support system that is in a 
network communication with the information management system and that supports encryption 
of the information performed by the information management system, 

the encryption support system comprising: 

an encryption rule storing portion that stores rule information that indicates an 
encryption rule for each encryption rank corresponding to an importance of information under an 
encryption policy, 

an encryption data transmitting portion that transmits encryption data that is 
necessary for encrypting the information in accordance with the encryption rule over the network 
to the information management system, 

a process information receiving portion that receives process information, which 
indicates an encryption process performed by the information management system, over the 
network from the information management system, 

a monitoring portion that monitors by confirming whether the information 
management system encrypted the information i s e ncrypt e d in accordance with the encryption 
rule by th e i nformat i on manag e m e nt syst e m based upon the process information received over 
the network from the information management system, and 

a compliance portion that orders the information management system over the 
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network, if the monitoring portion determines the information is not encrypted in accordance with 
the encryption rule, to encrypt the information in accordance with the encryption rule, and 
the information management system comprising: 

an encryption data receiving portion that receives the encryption data over the 
network from the encryption support system, 

an encryption rank classification storing portion that stores classification of 
information in connection with an encryption rank for each classification, 

an encrypting portion that specifies the classification of the information and 
encrypts the information by using the received encryption data of the encryption rank for the 
specified classification, 

an information storing portion that stores the encrypted information, and 

a process information transmitting portion that transmits the process information 
over the network to the encryption support system. 
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